Intel Next Unit Of Computing Firmware vulnerabilities

2 CVEs affecting Intel Next Unit Of Computing Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28385, published 2023-08-11.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-12158, published 2018-10-10. Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days. Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24, 2018 may allow a privileged user to potentially trigger a denial of service or information…
• CVE-2023-28385, published 2023-08-11. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access.